@cursor/july 0.1.31 → 0.1.33

package/dist/files-backends/agent-store-presigned-url.js

@@ -1,347 +1,232 @@
-/**
- * Vendored from `@anysphere/agent-store-sync` `presigned-url.ts` so the
- * published `@cursor/july` tarball does not depend on that private workspace
- * package (not on npm). Keep in sync when the source validator changes.
- */
-export class PresignedUrlRejectedError extends Error {
-    constructor(options) {
-        super(options.message);
-        this.name = "PresignedUrlRejectedError";
-        this.code = options.code;
-        this.url = options.url;
-    }
-}
-/**
- * Strict default: accepts `https:` URLs to an AWS S3 endpoint with no
- * userinfo and no private/internal address. Rejects DNS hosts that
- * resolve into the private IP space and IPv4-mapped IPv6 literals.
- */
-export function defaultPresignedUrlValidator(url) {
-    assertSafeAuthority(url);
-    if (url.protocol !== "https:") {
-        throw new PresignedUrlRejectedError({
-            code: "scheme_not_allowed",
-            message: `Refused presigned URL with non-https scheme: ${url.protocol}`,
-            url: redactPresignedUrlString(url),
-        });
-    }
-    const hostname = stripIPv6Brackets(url.hostname);
-    if (isLocalOrInternalHost(hostname)) {
-        throw new PresignedUrlRejectedError({
-            code: "private_host_not_allowed",
-            message: `Refused https presigned URL with private/internal host: ${hostname}`,
-            url: redactPresignedUrlString(url),
-        });
-    }
-    if (!isAwsS3Hostname(hostname)) {
-        throw new PresignedUrlRejectedError({
-            code: "host_not_allowed",
-            message: `Refused presigned URL whose host is not an AWS S3 endpoint: ${hostname}`,
-            url: redactPresignedUrlString(url),
-        });
-    }
-}
-/**
- * True when `hostname` is an AWS S3 object-storage endpoint:
- * `*.amazonaws.com` with at least one label in
- * {@link S3_OBJECT_LABELS}. Covers modern virtual-host, path-style,
- * dualstack, accelerate, and FIPS URLs. Rejects the S3-named control
- * planes (`s3-control`, `s3-outposts`, `s3-object-lambda`) and the
- * legacy regional virtual-host form AWS deprecated in 2019, both of
- * which would otherwise let a tampered presign issuer turn the sync
- * client into a signed-request gadget against non-storage APIs.
- */
-export function isAwsS3Hostname(hostname) {
-    const lowered = hostname.toLowerCase();
-    if (lowered !== "amazonaws.com" && !lowered.endsWith(".amazonaws.com")) {
-        return false;
-    }
-    const labels = lowered.split(".");
-    return labels.some(label => S3_OBJECT_LABELS.has(label));
-}
-const S3_OBJECT_LABELS = new Set(["s3", "s3-accelerate", "s3-fips"]);
-/**
- * Like {@link defaultPresignedUrlValidator} plus a case-insensitive
- * exact-match check against `allowedHosts` (no subdomain wildcards).
- */
-export function createHostAllowlistValidator(allowedHosts) {
-    const allowed = new Set(allowedHosts.map(host => host.toLowerCase()));
-    return (url) => {
-        defaultPresignedUrlValidator(url);
-        if (!allowed.has(url.hostname.toLowerCase())) {
-            throw new PresignedUrlRejectedError({
-                code: "host_not_allowed",
-                message: `Refused presigned URL whose host is not in the allowlist: ${url.hostname}`,
-                url: redactPresignedUrlString(url),
-            });
-        }
-    };
+// ../agent-store-sync/dist/presigned-url.js
+var PresignedUrlRejectedError = class extends Error {
+  constructor(options) {
+    super(options.message);
+    this.name = "PresignedUrlRejectedError";
+    this.code = options.code;
+    this.url = options.url;
+  }
+};
+function defaultPresignedUrlValidator(url) {
+  assertSafeAuthority(url);
+  if (url.protocol !== "https:") {
+    throw new PresignedUrlRejectedError({
+      code: "scheme_not_allowed",
+      message: `Refused presigned URL with non-https scheme: ${url.protocol}`,
+      url: redactPresignedUrlString(url)
+    });
+  }
+  const hostname = stripIPv6Brackets(url.hostname);
+  if (isLocalOrInternalHost(hostname)) {
+    throw new PresignedUrlRejectedError({
+      code: "private_host_not_allowed",
+      message: `Refused https presigned URL with private/internal host: ${hostname}`,
+      url: redactPresignedUrlString(url)
+    });
+  }
+  if (!isAwsS3Hostname(hostname)) {
+    throw new PresignedUrlRejectedError({
+      code: "host_not_allowed",
+      message: `Refused presigned URL whose host is not an AWS S3 endpoint: ${hostname}`,
+      url: redactPresignedUrlString(url)
+    });
+  }
 }
-/**
- * Virtual-host S3 endpoints for the production `agent-stores` bucket
- * (matches backend `getAgentStoreBucket()` in
- * `backend/server/src/agent-stores/utils/agentStoreS3.ts`, which presigns
- * with a `us-east-1` `S3Client` and the SDK's default virtual-host
- * addressing). Both the regional form emitted by modern AWS SDK v3 and
- * the legacy global form are listed so a presign issuer upgrade or
- * downgrade can't trip the allowlist. Path-style (`s3.amazonaws.com/agent-stores/…`)
- * is intentionally not listed: the server never sets `forcePathStyle`,
- * and admitting bare `s3.amazonaws.com` would re-open the "any bucket"
- * gap this allowlist exists to close.
- */
-export const BCS_AGENT_STORE_BUCKET_HOSTS = [
-    "agent-stores.s3.us-east-1.amazonaws.com",
-    "agent-stores.s3.amazonaws.com",
+function isAwsS3Hostname(hostname) {
+  const lowered = hostname.toLowerCase();
+  if (lowered !== "amazonaws.com" && !lowered.endsWith(".amazonaws.com")) {
+    return false;
+  }
+  const labels = lowered.split(".");
+  return labels.some((label) => S3_OBJECT_LABELS.has(label));
+}
+var S3_OBJECT_LABELS = /* @__PURE__ */ new Set(["s3", "s3-accelerate", "s3-fips"]);
+function createHostAllowlistValidator(allowedHosts) {
+  const allowed = new Set(allowedHosts.map((host) => host.toLowerCase()));
+  return (url) => {
+    defaultPresignedUrlValidator(url);
+    if (!allowed.has(url.hostname.toLowerCase())) {
+      throw new PresignedUrlRejectedError({
+        code: "host_not_allowed",
+        message: `Refused presigned URL whose host is not in the allowlist: ${url.hostname}`,
+        url: redactPresignedUrlString(url)
+      });
+    }
+  };
+}
+var BCS_AGENT_STORE_BUCKET_HOSTS = [
+  "agent-stores.s3.us-east-1.amazonaws.com",
+  "agent-stores.s3.amazonaws.com"
 ];
-const PLAYGROUND_AGENT_STORE_BUCKET_HOSTS = [
-    "agent-stores-928182716709-us-west-2-an.s3.us-west-2.amazonaws.com",
-    "agent-stores-928182716709-us-west-2-an.s3.amazonaws.com",
+var PLAYGROUND_AGENT_STORE_BUCKET_HOSTS = [
+  "agent-stores-928182716709-us-west-2-an.s3.us-west-2.amazonaws.com",
+  "agent-stores-928182716709-us-west-2-an.s3.amazonaws.com"
 ];
-/**
- * Production validator for the BCS agent-store sync transport: strict
- * default (https, S3 endpoint, no private hosts, no userinfo) plus the
- * {@link BCS_AGENT_STORE_BUCKET_HOSTS} pin. Pre-built so callers don't
- * accidentally pass {@link defaultPresignedUrlValidator}, which would
- * accept any AWS S3 bucket on the internet and let a buggy or
- * compromised presign issuer redirect sync traffic away from the real
- * `agent-stores` bucket.
- */
-export function createBcsPresignedUrlValidator() {
-    return createHostAllowlistValidator(BCS_AGENT_STORE_BUCKET_HOSTS);
+function createBcsPresignedUrlValidator() {
+  return createHostAllowlistValidator(BCS_AGENT_STORE_BUCKET_HOSTS);
 }
-/**
- * True when `backendUrl` targets a local dev backend (localhost or
- * lclhst.build). Matches IDE checks in `cursor-always-local` /
- * `cursorCredsService`.
- */
-export function isLocalAgentStoreBackendUrl(backendUrl) {
-    const trimmed = backendUrl.trim();
-    if (trimmed === "") {
-        return false;
-    }
-    return trimmed.includes("localhost") || trimmed.includes("lclhst.build");
+function isLocalAgentStoreBackendUrl(backendUrl) {
+  const trimmed = backendUrl.trim();
+  if (trimmed === "") {
+    return false;
+  }
+  return trimmed.includes("localhost") || trimmed.includes("lclhst.build");
 }
 function isPlaygroundAgentStoreBackendUrl(backendUrl) {
-    try {
-        const hostname = new URL(backendUrl).hostname.toLowerCase();
-        return (hostname === "playground.cursor.sh" ||
-            hostname.endsWith(".playground.cursor.sh"));
-    }
-    catch (_a) {
-        return false;
-    }
+  try {
+    const hostname = new URL(backendUrl).hostname.toLowerCase();
+    return hostname === "playground.cursor.sh" || hostname.endsWith(".playground.cursor.sh");
+  } catch (_a) {
+    return false;
+  }
 }
-/**
- * Presign validator for the sync client. Production/staging and playground
- * backends are pinned to their respective agent-store buckets. For a local dev API (see
- * {@link isLocalAgentStoreBackendUrl}), allow `http:` to loopback only
- * (LocalStack) and still pin all other URLs to {@link BCS_AGENT_STORE_BUCKET_HOSTS}.
- */
-export function createAgentStorePresignedUrlValidatorForBackend(backendUrl) {
-    if (isLocalAgentStoreBackendUrl(backendUrl)) {
-        return createLocalDevAgentStorePresignedUrlValidator();
-    }
-    if (isPlaygroundAgentStoreBackendUrl(backendUrl)) {
-        return createHostAllowlistValidator(PLAYGROUND_AGENT_STORE_BUCKET_HOSTS);
-    }
-    return createBcsPresignedUrlValidator();
+function createAgentStorePresignedUrlValidatorForBackend(backendUrl) {
+  if (isLocalAgentStoreBackendUrl(backendUrl)) {
+    return createLocalDevAgentStorePresignedUrlValidator();
+  }
+  if (isPlaygroundAgentStoreBackendUrl(backendUrl)) {
+    return createHostAllowlistValidator(PLAYGROUND_AGENT_STORE_BUCKET_HOSTS);
+  }
+  return createBcsPresignedUrlValidator();
 }
 function createLocalDevAgentStorePresignedUrlValidator() {
-    const bcsValidator = createBcsPresignedUrlValidator();
-    return (url) => {
-        assertSafeAuthority(url);
-        const hostname = stripIPv6Brackets(url.hostname);
-        if (url.protocol === "http:" && isLoopbackHostName(hostname)) {
-            return;
-        }
-        bcsValidator(url);
-    };
-}
-/**
- * Like {@link defaultPresignedUrlValidator} plus `http://localhost` /
- * `127.0.0.1` / `[::1]` (any port) for LocalStack-backed unit tests.
- * Non-loopback `https:` URLs fall through to the strict default (any S3
- * bucket). Do not use for IDE wiring — use
- * {@link createAgentStorePresignedUrlValidatorForBackend} instead.
- */
-export function localhostPermissivePresignedUrlValidator(url) {
+  const bcsValidator = createBcsPresignedUrlValidator();
+  return (url) => {
     assertSafeAuthority(url);
     const hostname = stripIPv6Brackets(url.hostname);
     if (url.protocol === "http:" && isLoopbackHostName(hostname)) {
-        return;
+      return;
     }
-    defaultPresignedUrlValidator(url);
+    bcsValidator(url);
+  };
 }
 function assertSafeAuthority(url) {
-    if (url.username !== "" || url.password !== "") {
-        throw new PresignedUrlRejectedError({
-            code: "userinfo_not_allowed",
-            message: "Refused presigned URL with embedded userinfo",
-            url: redactPresignedUrlString(url),
-        });
-    }
-}
-/**
- * Strip the query string and userinfo from a presigned URL so the AWS
- * SigV4 signature never reaches error messages or telemetry.
- */
-export function redactPresignedUrlString(url) {
-    try {
-        const parsed = typeof url === "string" ? new URL(url) : url;
-        return `${parsed.protocol}//${parsed.host}${parsed.pathname}`;
-    }
-    catch (_a) {
-        return "<unparseable-presigned-url>";
-    }
+  if (url.username !== "" || url.password !== "") {
+    throw new PresignedUrlRejectedError({
+      code: "userinfo_not_allowed",
+      message: "Refused presigned URL with embedded userinfo",
+      url: redactPresignedUrlString(url)
+    });
+  }
 }
-/**
- * Parse and validate a server-returned presigned URL before fetch. Uses
- * {@link relPath} in error text (never the raw URL) so SigV4 credentials
- * cannot leak into messages.
- */
-export function assertPresignedUrlSafe(args) {
-    let parsed;
-    try {
-        parsed = new URL(args.rawUrl);
-    }
-    catch (_a) {
-        throw new Error(`Refusing unparseable presigned URL for ${args.relPath}`);
-    }
-    try {
-        args.validatePresignedUrl(parsed);
-    }
-    catch (error) {
-        throw new Error(`Refusing presigned URL for ${args.relPath}: ${error instanceof Error ? error.message : String(error)}`, { cause: error instanceof Error ? error : undefined });
-    }
+function redactPresignedUrlString(url) {
+  try {
+    const parsed = typeof url === "string" ? new URL(url) : url;
+    return `${parsed.protocol}//${parsed.host}${parsed.pathname}`;
+  } catch (_a) {
+    return "<unparseable-presigned-url>";
+  }
 }
 function isLoopbackHostName(hostname) {
-    const lowered = hostname.toLowerCase();
-    return (lowered === "localhost" ||
-        lowered === "ip6-localhost" ||
-        lowered === "127.0.0.1" ||
-        lowered === "::1" ||
-        lowered === "0:0:0:0:0:0:0:1");
+  const lowered = hostname.toLowerCase();
+  return lowered === "localhost" || lowered === "ip6-localhost" || lowered === "127.0.0.1" || lowered === "::1" || lowered === "0:0:0:0:0:0:0:1";
 }
 function isLocalOrInternalHost(hostname) {
-    if (hostname.length === 0) {
-        return true;
-    }
-    if (isLoopbackHostName(hostname)) {
-        return true;
-    }
-    if (isIPv4Address(hostname)) {
-        return isPrivateOrInternalIPv4(hostname);
-    }
-    if (isIPv6Address(hostname)) {
-        return isPrivateOrInternalIPv6(hostname);
-    }
-    // DNS hostnames can't be classified without resolving; the caller
-    // relies on transport-level allowlists for those.
-    return false;
+  if (hostname.length === 0) {
+    return true;
+  }
+  if (isLoopbackHostName(hostname)) {
+    return true;
+  }
+  if (isIPv4Address(hostname)) {
+    return isPrivateOrInternalIPv4(hostname);
+  }
+  if (isIPv6Address(hostname)) {
+    return isPrivateOrInternalIPv6(hostname);
+  }
+  return false;
 }
 function stripIPv6Brackets(hostname) {
-    return hostname.startsWith("[") && hostname.endsWith("]")
-        ? hostname.slice(1, -1)
-        : hostname;
+  return hostname.startsWith("[") && hostname.endsWith("]") ? hostname.slice(1, -1) : hostname;
 }
 function isIPv4Address(hostname) {
-    const parts = hostname.split(".");
-    if (parts.length !== 4) {
-        return false;
+  const parts = hostname.split(".");
+  if (parts.length !== 4) {
+    return false;
+  }
+  return parts.every((part) => {
+    if (part.length === 0 || part.length > 3) {
+      return false;
     }
-    return parts.every(part => {
-        if (part.length === 0 || part.length > 3) {
-            return false;
-        }
-        if (!/^\d+$/.test(part)) {
-            return false;
-        }
-        const n = Number(part);
-        return Number.isInteger(n) && n >= 0 && n <= 255;
-    });
+    if (!/^\d+$/.test(part)) {
+      return false;
+    }
+    const n = Number(part);
+    return Number.isInteger(n) && n >= 0 && n <= 255;
+  });
 }
 function isPrivateOrInternalIPv4(hostname) {
-    const [a, b] = hostname.split(".").map(Number);
-    if (a === undefined || b === undefined) {
-        return true;
-    }
-    // RFC1918, loopback, link-local, multicast, unspecified, broadcast,
-    // carrier-grade NAT, and reserved blocks.
-    if (a === 0)
-        return true;
-    if (a === 10)
-        return true;
-    if (a === 127)
-        return true;
-    if (a === 169 && b === 254)
-        return true;
-    if (a === 172 && b >= 16 && b <= 31)
-        return true;
-    if (a === 192 && b === 168)
-        return true;
-    if (a === 100 && b >= 64 && b <= 127)
-        return true;
-    if (a >= 224 && a <= 239)
-        return true;
-    if (a >= 240)
-        return true;
-    return false;
+  const [a, b] = hostname.split(".").map(Number);
+  if (a === void 0 || b === void 0) {
+    return true;
+  }
+  if (a === 0)
+    return true;
+  if (a === 10)
+    return true;
+  if (a === 127)
+    return true;
+  if (a === 169 && b === 254)
+    return true;
+  if (a === 172 && b >= 16 && b <= 31)
+    return true;
+  if (a === 192 && b === 168)
+    return true;
+  if (a === 100 && b >= 64 && b <= 127)
+    return true;
+  if (a >= 224 && a <= 239)
+    return true;
+  if (a >= 240)
+    return true;
+  return false;
 }
 function isIPv6Address(hostname) {
-    // Loose check — just enough to route the host to the IPv6 classifier.
-    return hostname.includes(":");
+  return hostname.includes(":");
 }
 function isPrivateOrInternalIPv6(hostname) {
-    const lowered = hostname.toLowerCase();
-    if (lowered === "::" || lowered === "::1") {
-        return true;
-    }
-    // IPv4-mapped IPv6 (RFC4291) routes back through the IPv4 classifier
-    // so `[::ffff:169.254.169.254]` can't slip past the private-IP check.
-    const mapped = extractIPv4MappedAddress(lowered);
-    if (mapped !== undefined) {
-        return isPrivateOrInternalIPv4(mapped);
-    }
-    // ULA fc00::/7, link-local fe80::/10, multicast ff00::/8.
-    if (lowered.startsWith("fc") || lowered.startsWith("fd")) {
-        return true;
-    }
-    if (lowered.startsWith("fe8") || lowered.startsWith("fe9")) {
-        return true;
-    }
-    if (lowered.startsWith("fea") || lowered.startsWith("feb")) {
-        return true;
-    }
-    if (lowered.startsWith("ff")) {
-        return true;
-    }
-    return false;
+  const lowered = hostname.toLowerCase();
+  if (lowered === "::" || lowered === "::1") {
+    return true;
+  }
+  const mapped = extractIPv4MappedAddress(lowered);
+  if (mapped !== void 0) {
+    return isPrivateOrInternalIPv4(mapped);
+  }
+  if (lowered.startsWith("fc") || lowered.startsWith("fd")) {
+    return true;
+  }
+  if (lowered.startsWith("fe8") || lowered.startsWith("fe9")) {
+    return true;
+  }
+  if (lowered.startsWith("fea") || lowered.startsWith("feb")) {
+    return true;
+  }
+  if (lowered.startsWith("ff")) {
+    return true;
+  }
+  return false;
 }
-// Convert an IPv4-mapped IPv6 literal (`::ffff:a.b.c.d` or
-// `::ffff:hhhh:hhhh`) to its dotted-quad form. Returns undefined otherwise.
 function extractIPv4MappedAddress(hostname) {
-    const dotted = hostname.match(/^(?:0:0:0:0:0|::):?ffff:(\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})$/i);
-    if (dotted) {
-        return dotted[1];
-    }
-    if (hostname.startsWith("::ffff:")) {
-        const tail = hostname.slice("::ffff:".length);
-        if (isIPv4Address(tail)) {
-            return tail;
-        }
-        const hex = tail.match(/^([0-9a-f]{1,4}):([0-9a-f]{1,4})$/i);
-        if (hex) {
-            const high = Number.parseInt(hex[1], 16);
-            const low = Number.parseInt(hex[2], 16);
-            if (Number.isFinite(high) &&
-                Number.isFinite(low) &&
-                high >= 0 &&
-                high <= 0xffff &&
-                low >= 0 &&
-                low <= 0xffff) {
-                return `${(high >> 8) & 0xff}.${high & 0xff}.${(low >> 8) & 0xff}.${low & 0xff}`;
-            }
-        }
-    }
-    return undefined;
-}
+  const dotted = hostname.match(/^(?:0:0:0:0:0|::):?ffff:(\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})$/i);
+  if (dotted) {
+    return dotted[1];
+  }
+  if (hostname.startsWith("::ffff:")) {
+    const tail = hostname.slice("::ffff:".length);
+    if (isIPv4Address(tail)) {
+      return tail;
+    }
+    const hex = tail.match(/^([0-9a-f]{1,4}):([0-9a-f]{1,4})$/i);
+    if (hex) {
+      const high = Number.parseInt(hex[1], 16);
+      const low = Number.parseInt(hex[2], 16);
+      if (Number.isFinite(high) && Number.isFinite(low) && high >= 0 && high <= 65535 && low >= 0 && low <= 65535) {
+        return `${high >> 8 & 255}.${high & 255}.${low >> 8 & 255}.${low & 255}`;
+      }
+    }
+  }
+  return void 0;
+}
+export {
+  createAgentStorePresignedUrlValidatorForBackend
+};

package/dist/files-backends/cursor-hosted.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cursor-hosted.d.ts","sourceRoot":"","sources":["../../src/files-backends/cursor-hosted.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAGH,OAAO,EAEL,KAAK,QAAQ,EACb,KAAK,YAAY,EAGlB,MAAM,aAAa,CAAC;AAWrB;;;;;;GAMG;AACH,eAAO,MAAM,mCAAmC,gCACjB,CAAC;AAgBhC;;;;;;;;GAQG;AACH,wBAAgB,4BAA4B,CAC1C,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAGT;AAED,MAAM,WAAW,wBAAwB;IACvC,oFAAoF;IACpF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qDAAqD;IACrD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sEAAsE;IACtE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,2CAA2C;IAC3C,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB;AAuCD,KAAK,kBAAkB,GAAG,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG;IAChD,gFAAgF;IAChF,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAAC;CACrD,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,GAAE,wBAA6B,GACrC,kBAAkB,CA8VpB"}
+{"version":3,"file":"cursor-hosted.d.ts","sourceRoot":"","sources":["../../src/files-backends/cursor-hosted.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAGH,OAAO,EAEL,KAAK,QAAQ,EACb,KAAK,YAAY,EAGlB,MAAM,aAAa,CAAC;AAWrB;;;;;;GAMG;AACH,eAAO,MAAM,mCAAmC,gCACjB,CAAC;AAgBhC;;;;;;;;GAQG;AACH,wBAAgB,4BAA4B,CAC1C,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAGT;AAED,MAAM,WAAW,wBAAwB;IACvC,oFAAoF;IACpF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qDAAqD;IACrD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sEAAsE;IACtE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,2CAA2C;IAC3C,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB;AAuCD,KAAK,kBAAkB,GAAG,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG;IAChD,gFAAgF;IAChF,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAAC;CACrD,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,GAAE,wBAA6B,GACrC,kBAAkB,CAyWpB"}

package/dist/files-backends/cursor-hosted.js

@@ -347,7 +347,19 @@ export function cursorHostedFiles(options = {}) {
             return __awaiter(this, void 0, void 0, function* () {
                 return yield withFiles((files) => __awaiter(this, void 0, void 0, function* () {
                     var _a, _b;
-                    const presigned = yield storePost(options, files.path("/download"), { paths: [key] });
+                    // Presigning a read of a path the store has no live object for — never
+                    // written, or deleted and now holding a tombstone — is a 404. That is
+                    // absence, which `read()` reports as undefined, not a failure.
+                    let presigned;
+                    try {
+                        presigned = yield storePost(options, files.path("/download"), { paths: [key] });
+                    }
+                    catch (error) {
+                        if (error instanceof StoreApiError && error.status === 404) {
+                            return undefined;
+                        }
+                        throw error;
+                    }
                     const url = (_b = (_a = presigned.files) === null || _a === void 0 ? void 0 : _a[0]) === null || _b === void 0 ? void 0 : _b.url;
                     if (url === undefined) {
                         return undefined;
@@ -510,11 +522,22 @@ function sendJson(options, url, method, body) {
             throw new Error(`cursorHostedFiles ${url} returned non-JSON (${response.status})`);
         }
         if (!response.ok) {
-            throw new Error(`cursorHostedFiles ${url}: ${describeError(parsed, response.status)}`);
+            throw new StoreApiError(response.status, `cursorHostedFiles ${url}: ${describeError(parsed, response.status)}`);
         }
         return parsed;
     });
 }
+/**
+ * A non-2xx answer from the files API, carrying the status so a caller can
+ * tell "absent" apart from a failure it must not swallow.
+ */
+class StoreApiError extends Error {
+    constructor(status, message) {
+        super(message);
+        this.status = status;
+        this.name = "StoreApiError";
+    }
+}
 function describeError(parsed, status) {
     if (parsed !== null &&
         typeof parsed === "object" &&

package/dist/internal/cursor-relay-core.d.ts

@@ -73,7 +73,18 @@ export interface CursorRelayCoreOptions<TEvent extends {
     fetchImpl?: typeof fetch;
     /** Test seam: override long-poll wait (default 25s). */
     pollWaitMs?: number;
+    /**
+     * Desired-revision generation for hosted engines. Sent as
+     * `x-agent-serve-generation` so the control plane can fence zombies after
+     * a redeploy. Defaults to `process.env.AGENT_SERVE_GENERATION` when set.
+     */
+    deploymentGeneration?: number;
 }
+/** Must match server-shared `AGENT_SERVE_GENERATION_HEADER`. */
+export declare const AGENT_SERVE_GENERATION_HEADER = "x-agent-serve-generation";
+/** Must match server-shared `AGENT_SERVE_GENERATION_ENV_VAR`. */
+export declare const AGENT_SERVE_GENERATION_ENV_VAR = "AGENT_SERVE_GENERATION";
+export declare function resolveAgentServeDeploymentGeneration(explicit?: number): number | undefined;
 export declare class CursorRelayCore<TEvent extends {
     offset: string;
 }> {
@@ -84,6 +95,7 @@ export declare class CursorRelayCore<TEvent extends {
     private consumePromise;
     private readonly offsetStore;
     private readonly fetchImpl;
+    private readonly deploymentGeneration;
     private consumerId;
     /** undefined until the first registration, so a clean first success logs. */
     private lastRegistrationLog;

package/dist/internal/cursor-relay-core.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cursor-relay-core.d.ts","sourceRoot":"","sources":["../../src/internal/cursor-relay-core.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AA6BH,8DAA8D;AAC9D,qBAAa,gBAAgB;IACf,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAArC,YAA6B,QAAQ,EAAE,MAAM,EAAI;IAEjD,OAAO,KAAK,QAAQ,GAEnB;IAEK,IAAI,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAcxC;IAEK,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAWxC;CACF;AAED,6CAA6C;AAC7C,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAMjE;AASD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEzD;AAQD;;;;GAIG;AACH,MAAM,WAAW,YAAY,CAAC,MAAM,SAAS;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE;IAC7D,2EAA2E;IAC3E,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,2EAA2E;IAC3E,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,kDAAkD;IAClD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,0DAA0D;IAC1D,qBAAqB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC;IACnD;;;;;;OAMG;IACH,uBAAuB,CAAC,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC;IACtD;;;;;OAKG;IACH,yBAAyB,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,EAAE,CAAC;IACnD;;;;OAIG;IACH,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;IACvC;;;OAGG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACxC;AAED,MAAM,WAAW,sBAAsB,CAAC,MAAM,SAAS;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE;IACvE,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;IAC9B,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,2CAA2C;IAC3C,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,wDAAwD;IACxD,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,qBAAa,eAAe,CAAC,MAAM,SAAS;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE;IAmBhD,OAAO,CAAC,QAAQ,CAAC,OAAO;IAlBpC,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,KAAK,CAA8B;IAC3C,OAAO,CAAC,aAAa,CAA6B;IAClD,OAAO,CAAC,cAAc,CAA4B;IAClD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAmB;IAC/C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;IACzC,OAAO,CAAC,UAAU,CAAM;IACxB,6EAA6E;IAC7E,OAAO,CAAC,mBAAmB,CAAqB;IAChD,2EAA2E;IAC3E,OAAO,CAAC,cAAc,CAAS;IAC/B;;;;OAIG;IACH,OAAO,CAAC,gBAAgB,CAA+B;IAEvD,YAA6B,OAAO,EAAE,sBAAsB,CAAC,MAAM,CAAC,EAGnE;IAED,KAAK,IAAI,IAAI,CAKZ;IAED;;;;OAIG;YACW,GAAG;IAWjB;;;;;OAKG;IACG,iBAAiB,IAAI,OAAO,CAAC,MAAM,CAAC,CA2BzC;IAEK,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAsB1B;IAED;;;;;;OAMG;YACW,UAAU;IAuCxB,OAAO,CAAC,GAAG;YAMG,OAAO;IAiBrB,4EAA4E;YAC9D,oBAAoB;IAYlC;;;;OAIG;YACW,YAAY;IA8B1B,8EAA8E;IAC9E,OAAO,CAAC,sBAAsB;YAShB,WAAW;IAsFzB;;;;;;OAMG;YACW,iBAAiB;IA8B/B,2EAA2E;YAC7D,uBAAuB;IAgBrC,OAAO,CAAC,KAAK;IAkBb,OAAO,CAAC,OAAO;CAKhB"}
+{"version":3,"file":"cursor-relay-core.d.ts","sourceRoot":"","sources":["../../src/internal/cursor-relay-core.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AA6BH,8DAA8D;AAC9D,qBAAa,gBAAgB;IACf,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAArC,YAA6B,QAAQ,EAAE,MAAM,EAAI;IAEjD,OAAO,KAAK,QAAQ,GAEnB;IAEK,IAAI,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAcxC;IAEK,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAWxC;CACF;AAED,6CAA6C;AAC7C,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAMjE;AASD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEzD;AAQD;;;;GAIG;AACH,MAAM,WAAW,YAAY,CAAC,MAAM,SAAS;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE;IAC7D,2EAA2E;IAC3E,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,2EAA2E;IAC3E,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,kDAAkD;IAClD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,0DAA0D;IAC1D,qBAAqB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC;IACnD;;;;;;OAMG;IACH,uBAAuB,CAAC,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC;IACtD;;;;;OAKG;IACH,yBAAyB,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,EAAE,CAAC;IACnD;;;;OAIG;IACH,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;IACvC;;;OAGG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACxC;AAED,MAAM,WAAW,sBAAsB,CAAC,MAAM,SAAS;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE;IACvE,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;IAC9B,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,2CAA2C;IAC3C,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,wDAAwD;IACxD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,gEAAgE;AAChE,eAAO,MAAM,6BAA6B,6BAA6B,CAAC;AAExE,iEAAiE;AACjE,eAAO,MAAM,8BAA8B,2BAA2B,CAAC;AAEvE,wBAAgB,qCAAqC,CACnD,QAAQ,CAAC,EAAE,MAAM,GAChB,MAAM,GAAG,SAAS,CAoBpB;AAED,qBAAa,eAAe,CAAC,MAAM,SAAS;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE;IAoBhD,OAAO,CAAC,QAAQ,CAAC,OAAO;IAnBpC,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,KAAK,CAA8B;IAC3C,OAAO,CAAC,aAAa,CAA6B;IAClD,OAAO,CAAC,cAAc,CAA4B;IAClD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAmB;IAC/C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;IACzC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAqB;IAC1D,OAAO,CAAC,UAAU,CAAM;IACxB,6EAA6E;IAC7E,OAAO,CAAC,mBAAmB,CAAqB;IAChD,2EAA2E;IAC3E,OAAO,CAAC,cAAc,CAAS;IAC/B;;;;OAIG;IACH,OAAO,CAAC,gBAAgB,CAA+B;IAEvD,YAA6B,OAAO,EAAE,sBAAsB,CAAC,MAAM,CAAC,EAMnE;IAED,KAAK,IAAI,IAAI,CAKZ;IAED;;;;OAIG;YACW,GAAG;IAWjB;;;;;OAKG;IACG,iBAAiB,IAAI,OAAO,CAAC,MAAM,CAAC,CA2BzC;IAEK,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAsB1B;IAED;;;;;;OAMG;YACW,UAAU;IA8CxB,OAAO,CAAC,GAAG;YAMG,OAAO;IAwBrB,4EAA4E;YAC9D,oBAAoB;IAYlC;;;;OAIG;YACW,YAAY;IA8B1B,8EAA8E;IAC9E,OAAO,CAAC,sBAAsB;YAShB,WAAW;IAsFzB;;;;;;OAMG;YACW,iBAAiB;IA8B/B,2EAA2E;YAC7D,uBAAuB;IAqBrC,OAAO,CAAC,KAAK;IAkBb,OAAO,CAAC,OAAO;CAKhB"}